MAL-2025-146740 Malicious code in proxima-slidev-middleware-adonis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 344684591780ddb2924ad9c248fd8d91d956e9e4ffe38df0593aa3a037c0a957 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148745 Malicious code in tool-nightmare-geckodriver-juno (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9973ab631522b2696dda34c1e449efbcb9782facea5ef651159b5320ca7ea22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140490 Malicious code in castor-oberon-ursa-indus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4008fe130fc6c3a1dae4769d222879a7e07743d7dbaba2fecee04cf629b0e57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140476 Malicious code in cassini-taurus-init-eris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77e8e587d4ebb2912d2b71771a2c9697c9cc76f613e2ef8b99f1eaac82ebd142 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144022 Malicious code in juno-comet-meissa-oberon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 902446a464f790e026bbe1b3e2bc37490b51139fcc3970a97b23c430af7f9968 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140165 Malicious code in buffer-nuxtjs-webdriverio-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a490354b893e0ccde2e7ad0b5f8c35be0eaae85e5ce7d7369ccfbd1b1dab1212 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148447 Malicious code in tailwindcss-miranda-aquarius-duplex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77b2f9ddd15df74589ecc838ba8b684999addf1ad6470c0b239cb7e34e2ffbb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141322 Malicious code in css-minimizer-webpack-plugin-comet-impulse-loop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2036bd03a92e217ea6354ba65928a8ff78ecbf6c59fc278e254c0d1d3153fa76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147204 Malicious code in relay-mocha-mutation-rate-limiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aba86765ad1d4909a393eb1d62de286cacd7f00f07a84862e0f6f275d9553d71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140685 Malicious code in changelog-spawn-spectron-webdriver-query (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbb9232c41cee975e4e3646f041c2c10d24472a10c0535ca5b38420c9aa76bdb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139756 Malicious code in auth0-sagitta-koa-kronos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d93c83ef09b706f1e0c5bb0ea44c3961eb7c8d59ba7634621209328d95356a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146558 Malicious code in process-mysql-cosmiconfig-npm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4955cb99431235505cbe59ed6497b1d38a001b5e13cc6d6dffea67900dd399d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144051 Malicious code in jupiter-bunyan-tool-charon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8928e876b0f2f7dc596c3128c5fc8e0a7208ece48d1e902d00073c1726a6b8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146368 Malicious code in polaris-slides-javascript-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dea543f41810be6c3ce630f5af28173f14cbe4d825d2570aa9820d13bb7b1da8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143372 Malicious code in html-webpack-plugin-slides-bunyan-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a6907b6287280cdd51be770f95a0016abb5804f689916408a57db5104aff9b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146717 Malicious code in proxima-helmet-schema-rollup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c995599cbe52eeb9442e68f9fe9ff41d1f1b8074946fbb0b96de6f120630700 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143129 Malicious code in halley-auriga-prettier-plugin-markdown-rest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 121edc4555579663ed0cdd1b890a4798334cbc15d4f177d9d961e054c2b64395 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141078 Malicious code in convict-loopback-ganymede-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 104427287b6201291737d63904d566b88badc27604dc3788a575b97b3de23343 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148046 Malicious code in socketio-buffer-version-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 517151a6ccede16b7c4c18188be61ff22d3349046b3dfe886953d1350134bc0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149250 Malicious code in vulcan-query-vulcan-venus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e276c9a3d9ef975ca998a95544897408b9807e3f2b1209e34880c529e40caa80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...